medium4.3Public exploit code
CVE-2007-4252
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CHILKAT ASP String - 'CkString.dll 1.1 SaveToFile()' Insecure Method2007-08-05 · remote · windows · Verified
Impact
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chilkat Software | Asp String | Version 1.1 |
References
- NVD record
- CVE.org record
- http://osvdb.org/40110
- http://www.securityfocus.com/bid/25205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35812
- https://www.exploit-db.com/exploits/4255
- http://osvdb.org/40110
- http://www.securityfocus.com/bid/25205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35812
- https://www.exploit-db.com/exploits/4255